Load Test

.github/workflows/dast-test.yaml

@@ -2,7 +2,8 @@ name: deploy
 
 on:
   push:
-    branches: ["main"]
+    #Se cambia nombre del branch para evitar que se ejecute para ejecutar otros labs nombre original: main
+    branches: ["main-test"]
 
 jobs:
   build:

.github/workflows/deploy.yaml

@@ -1,8 +1,7 @@
 name: deploy
 on:
   push:
-    #Se cambia nombre del branch para evitar que se ejecute para ejecutar otros labs nombre original: main
-    branches: [ "main-temp" ]
+    branches: [ "main" ]
 env:
   REGISTRY: antarescr
   IMAGE_NAME: rest_api
@@ -102,4 +101,33 @@ jobs:
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
         with:
           image: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
-
+
+  #LoadTest
+  LoadTest:
+    name: Load Testing
+    needs: build
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+        name: Checkout code
+
+      - name: Set up
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Install Dependencies
+        run: |
+          npm install -g artillery
+          npm install --save-dev artillery-plugin-ensure
+
+      - name: Run container
+        run: |
+          docker run -d --name rest-api -p 3000:3000 ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
+
+      - name: Run Load Test
+        run: |
+          set -e  # Detiene el workflow si la prueba de carga falla.
+
+          artillery run loadTest/basic.yaml || exit 1

loadTest/basic.yaml

@@ -0,0 +1,36 @@
+config:
+  target: "http://localhost:3000"
+  plugins:
+    expect: {}
+    ensure:
+      p95: 200 # 95% < 200ms; para ser satisfactorio.
+      maxErrorRate: 2 # 2% de error permitido (timeouts, server error, bad request, etc.)
+
+  phases:
+    - duration: 5
+      arrivalRate: 1 # 1 request/s
+      name: "Warming up"
+
+    - duration: 10
+      arrivalRate: 2 # 2 request/s
+      rampTo: 100 # hasta 100 request/s en 7segundos
+      name: "Ramping up"
+
+    - duration: 15
+      arrivalRate: 10 # 10 request/s
+      name: "Sustained load"
+
+scenarios:
+  - name: "Healthcheck"
+    flow:
+      - get:
+          url: "/healthcheck"
+          expect:
+            - statusCode: 200
+
+  - name: "Delay"
+    flow:
+      - get:
+          url: "/delay?seconds=0.1"
+          expect:
+            - statusCode: 200

package.json

@@ -24,6 +24,7 @@
     "winston": "^3.8.2"
   },
   "devDependencies": {
+    "artillery-plugin-ensure": "^1.14.0",
     "eslint": "^6.1.0",
     "eslint-config-airbnb-base": "^14.0.0",
     "eslint-config-prettier": "^4.3.0",

src/main.js

@@ -88,9 +88,9 @@ router.get('/search', (req, res) => {
   const query = req.query.q;
 
   // Vulnerable rendering
-  res.send(`<h1>Search Results for: ${query}</h1>`);
+  //res.send(`<h1>Search Results for: ${query}</h1>`);
   //Se corrige vulnerabilidad
-  //res.send({ query: query });
+  res.send({ query: query });
 
 });